Medium severity4.3NVD Advisory· Published Jan 30, 2023· Updated Jun 17, 2026
CVE-2022-2988
CVE-2022-2988
Description
A CWE-787: Out-of-bounds Write vulnerability exists that could cause sensitive information leakage when accessing a malicious web page from the commissioning software. Affected Products: SoMachine HVAC (Versions prior to V2.1.0), EcoStruxure Machine Expert – HVAC (Versions prior to V1.4.0)
Affected products
6- cpe:2.3:a:schneider-electric:ecostruxure_machine_expert_-_hvac:*:*:*:*:*:*:*:*Range: <1.4.0
cpe:2.3:a:schneider-electric:somachine_hvac:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:schneider-electric:somachine_hvac:*:*:*:*:*:*:*:*range: <2.1.0
- (no CPE)range: <V2.1.0
- (no CPE)range: All
<V1.4.0+ 1 more
- (no CPE)range: <V1.4.0
- (no CPE)range: All
Patches
Vulnerability mechanics
References
1- download.schneider-electric.com/filesnvdRelease NotesVendor Advisory
News mentions
0No linked articles in our index yet.